Privacy policy
Last updated: 21 October 2026
1. Controller
The controller within the meaning of Art. 4(7) GDPR for the app Nomling and this website is:
- Provider
- Marvin Kicha
- Address
- Hueskenboerde 34
45136 Essen
Germany - hello@deckle.io
No data protection officer has been appointed, and none is required: fewer than twenty people are permanently engaged in automated processing (§ 38(1) German Federal Data Protection Act), and there is neither large-scale regular monitoring nor large-scale processing of special categories of data (Art. 37(1) GDPR).
2. The app in short
Nomling has no account, no ads and no tracking, and it never connects to the internet. Nothing you do in the app is sent to us or anyone else.
3. What stays on your device
The app stores the following only locally on your iPhone:
- which monster you picked
- how many snacks it has eaten and how often it chomped
- your setting for keeping the face awake on the cover
In legal terms this is storing information on your device under § 25 of the German Telecommunications Digital Services Data Protection Act. No consent is needed because the storage is strictly necessary for the function you use (§ 25(2) no. 2). This data never reaches us. Deleting the app removes all of it.
4. Sensors and device state
While the app is open, it reads the hinge angle of your iPhone Duo (to open and close the mouth), the tilt of the device (so the eyes can follow it) and the battery level and charging state (to decide whether the screen may stay on). These values are used only in the moment, on your device. They are not stored and not transmitted.
5. Crash reports via Apple
If you have turned on “Share with App Developers” in iOS, Apple provides us with aggregated usage statistics and crash reports through App Store Connect. They contain nothing that would let us identify you. The setting is under Settings → Privacy & Security → Analytics & Improvements.
6. Contacting us by email
If you email us, we process your address and your message in order to reply. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is answering enquiries. We delete the correspondence once the matter is settled, at the latest after 12 months, unless a statutory retention duty applies.
7. This website
The website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. When you visit, the server processes the usual access data (IP address, time, page requested, amount of data, referrer, user agent) in server logs. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is secure and reliable operation. The logs are kept only as long as needed for that and are then deleted automatically. Hetzner Online GmbH acts as our processor under Art. 28 GDPR; a data processing agreement is in place. The servers are in Germany; no data is transferred to a third country.
- This website sets no cookies and uses no local storage.
- There is no analytics or audience measurement.
- Fonts and the chomp sound are served from our own server. There is no connection to Google Fonts or any other third party.
8. What doesn't happen
- no advertising and no advertising identifiers
- no tracking, no analytics tools, no third-party SDKs
- no purchases inside the app
- no access to contacts, photos, location, microphone or camera
- no automated decision-making or profiling (Art. 22 GDPR)
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) (Art. 21). Because we keep no accounts and receive no data from the app, we are usually unable to attribute any processing to you (Art. 11 GDPR). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is:
- Authority
- Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
- Address
- Kavalleriestraße 2–4
40213 Düsseldorf, Germany - Website
- ldi.nrw.de
You can also contact the supervisory authority where you live or work.
10. Changes
We update this policy when the app, the website or the law changes. The version published here applies; the date at the top shows when it was last changed.